NVD

Id
67801  
Name
CVE-2005-2092  
Description
BEA Systems WebLogic 8.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes WebLogic to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2005-07-05  
Modified Date
2017-07-10  
Seq
2005-2092  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
350787 67801 CVE-2005-2092 20050606 A new whitepaper by Watchfire - HTTP Request Smuggling  View
350788 67801 CVE-2005-2092 1014366  View
350789 67801 CVE-2005-2092 http://www.securiteam.com/securityreviews/5GP0220G0U.html  View
350790 67801 CVE-2005-2092 http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf  View
350791 67801 CVE-2005-2092 bea-weblogic-hrs(42901)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62364 JVNDB-2005-000566 BEA 製品の Web キャッシュ汚染によるクロスサイトスクリプティングおよび WAF のフィルタリングを回避される脆弱性 ------------ CVE-2005-2092 13296 CVE-2005-2092 67801 4.3 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000566.html 2005-10-10 2007-04-01 View